Re: [Freeipa-devel] server install failing in F-20?

2014-03-03 Thread Petr Viktorin

On 02/28/2014 09:48 PM, Rob Crittenden wrote:

I'm seeing what looks like https://fedorahosted.org/freeipa/ticket/4084
in new F-20 install I stood up. I finally threw my hands up and
configured system to use an environment file to work around it.

Not sure if anyone else is seeing this.

rob


I'm getting a similar error in CI. Setting SELinux to permissive made it 
go away. A bugzilla is filed here: 
https://bugzilla.redhat.com/show_bug.cgi?id=1063827


--
PetrĀ³

___
Freeipa-devel mailing list
Freeipa-devel@redhat.com
https://www.redhat.com/mailman/listinfo/freeipa-devel


Re: [Freeipa-devel] server install failing in F-20?

2014-03-03 Thread Anthony Messina
On Friday, February 28, 2014 03:48:43 PM Rob Crittenden wrote:
> I'm seeing what looks like https://fedorahosted.org/freeipa/ticket/4084 
> in new F-20 install I stood up. I finally threw my hands up and 
> configured system to use an environment file to work around it.
> 
> Not sure if anyone else is seeing this.

In reference to finding a way to upgrade F19 to F20: 

https://www.redhat.com/archives/freeipa-users/2014-March/msg0.html

I've been doing some VM testing of both F19 to F20 "yum upgrades" as well as 
fresh installs on F20.  I actually have better luck with the yum upgrade.  The 
fresh install of FreeIPA on F20 fails near the end of the process using 
freeipa-server-3.3.4-3.fc20.x86_64.  I have to manually start named and 
sometimes krb5kdc/kadmin then it works after a reboot.


*** F20 fresh install error:

2014-03-02T20:41:10Z DEBUG Starting external process
2014-03-02T20:41:10Z DEBUG args=/bin/systemctl enable ipa.service
2014-03-02T20:41:10Z DEBUG Process finished, return code=0
2014-03-02T20:41:10Z DEBUG stdout=
2014-03-02T20:41:10Z DEBUG stderr=ln -s '/usr/lib/systemd/system/ipa.service' 
'/etc/systemd/system/multi-user.target.wants/ipa.service'

2014-03-02T20:41:10Z DEBUG Starting external process
2014-03-02T20:41:10Z DEBUG args=/bin/systemctl restart ipa.service
2014-03-02T20:42:45Z DEBUG Process finished, return code=1
2014-03-02T20:42:45Z DEBUG stdout=
2014-03-02T20:42:45Z DEBUG stderr=Job for ipa.service failed. See 'systemctl 
status ipa.service' and 'journalctl -xn' for details.

2014-03-02T20:42:45Z DEBUG   File "/usr/lib/python2.7/site-
packages/ipaserver/install/installutils.py", line 622, in run_script
return_value = main_function()

  File "/sbin/ipa-server-install", line 1230, in main
ipaservices.knownservices.ipa.enable()

  File "/usr/lib/python2.7/site-
packages/ipapython/platform/fedora16/service.py", line 134, in enable
self.restart(instance_name)

  File "/usr/lib/python2.7/site-packages/ipapython/platform/base/systemd.py", 
line 131, in restart
ipautil.run(["/bin/systemctl", "restart", 
self.service_instance(instance_name)], capture_output=capture_output)

  File "/usr/lib/python2.7/site-packages/ipapython/ipautil.py", line 345, in 
run
raise CalledProcessError(p.returncode, arg_string, stdout)

2014-03-02T20:42:45Z DEBUG The ipa-server-install command failed, exception: 
CalledProcessError: Command '/bin/systemctl restart ipa.service' returned non-
zero exit status 1


*** F19 to F20 upgrade, things seem to go well until the restart of pki-
tomcatd@pki-tomcat.service

SEVERE: The scratchDir you specified: /var/lib/pki/pki-
tomcat/work/Catalina/localhost/pki is unusable

Changing the ownership of that directory to 'pkiuser:pkiuser' resolves the 
SEVERE entry in the log and things seem to work.

-A

-- 
Anthony - http://messinet.com - http://messinet.com/~amessina/gallery
8F89 5E72 8DF0 BCF0 10BE 9967 92DC 35DC B001 4A4E


signature.asc
Description: This is a digitally signed message part.
___
Freeipa-devel mailing list
Freeipa-devel@redhat.com
https://www.redhat.com/mailman/listinfo/freeipa-devel

Re: [Freeipa-devel] server install failing in F-20?

2014-03-03 Thread Martin Kosek
On 02/28/2014 11:05 PM, Alexander Bokovoy wrote:
> On Fri, 28 Feb 2014, Rob Crittenden wrote:
>> I'm seeing what looks like https://fedorahosted.org/freeipa/ticket/4084 in
>> new F-20 install I stood up. I finally threw my hands up and configured
>> system to use an environment file to work around it.
>>
>> Not sure if anyone else is seeing this.
> One difference on F20 is that you are not supposed to see ccaches in
> /tmp -- they are in the kernel keyring.

Did you test with freeipa-server-3.3.4-3.fc20.x86_64? Works for me in
up-to-date F20.

This build contains the patches in the ticket and thus fixes the bug 1044994.

Martin

___
Freeipa-devel mailing list
Freeipa-devel@redhat.com
https://www.redhat.com/mailman/listinfo/freeipa-devel


Re: [Freeipa-devel] server install failing in F-20?

2014-02-28 Thread Alexander Bokovoy

On Fri, 28 Feb 2014, Rob Crittenden wrote:
I'm seeing what looks like 
https://fedorahosted.org/freeipa/ticket/4084 in new F-20 install I 
stood up. I finally threw my hands up and configured system to use an 
environment file to work around it.


Not sure if anyone else is seeing this.

One difference on F20 is that you are not supposed to see ccaches in
/tmp -- they are in the kernel keyring.


--
/ Alexander Bokovoy

___
Freeipa-devel mailing list
Freeipa-devel@redhat.com
https://www.redhat.com/mailman/listinfo/freeipa-devel


[Freeipa-devel] server install failing in F-20?

2014-02-28 Thread Rob Crittenden
I'm seeing what looks like https://fedorahosted.org/freeipa/ticket/4084 
in new F-20 install I stood up. I finally threw my hands up and 
configured system to use an environment file to work around it.


Not sure if anyone else is seeing this.

rob

___
Freeipa-devel mailing list
Freeipa-devel@redhat.com
https://www.redhat.com/mailman/listinfo/freeipa-devel